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Amendments to the Claims 

1. (currently amended) A versatile customizable security and filtering software 
embedded upon a computer-readable medium, the software capable of being that-ean 
be installed on a computer and be used by a remote user who obtains anonymity on a 
global telecommunications network or by a local user, the software comprising: 

(a) an administrative module that a user interacts with for creating user accounts 
and configuring those user accounts, and for configuring automated services, 

the administrative module for accepting user inputs for configuration settings for 
inbound communications and for outbound communications, and having list 
maintenance functions including list editing, l ist delating, se arching of l i sts, saving of 
l ists, proxy cha i ning routing, add i ng anekJelot i ng uoo re , int e rch a nging l ists a nd i mporting 
and e xporting li oto, 

said administrative module for configuring a range of access levels and being 
capable of creating t hr ee typ e s of user accounts that have unique user names and 
passwords for each user account including an administrator account that Is self- 
configuring and that controls automated services and selects for each account hard 
filtering or soft filtering, regular accounts with administrative privileges other than the 
privilege to create additional accounts, view information on any other accounts or 
configure automated services and regular accounts without administrative privileges 
and in addition a fourth type of user account namely one anonymous guest user 
account to be used in a manual launch of the software by general users who have no 
system-based user name or password, 

the administrative module for storing as encrypted files on hardware memory the 
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configurations of the range of access levels for the user accounts created and the 
configurations of the automated services 
(b) an application server including 

<i)-a domain filtering engine capable of using from the encrypted files a 
friendly outbound list and an unfriendly outbound list only one of which is active at any 
given time and an outbound exception list, and using a friendly inbound list and an 
unfriendly inbound list only one of which is active at any given time, and a domain 
inbound exception list, the friendly outbound list, the unfriendly outbound list, the friendly 
inbound list, the unfriendly inbound list, the outbound exception list? and the domain 
inbound exception lis t, a friondfy e ma il l ist a nd an unfri e ndly o mail Not being uniquely 
configured for each user account, 

the domain filtering engine capable of registering the request in a logfile of 
all web sites requested by a user and capable of performing domain filtering, said 
domain filtering including for inbound requests checking the identity of a requesting 
remote client against the friendly inbound or unfriendly inbound list and domain inbound 
exception list maintained in the encrypted files and including for outbound requests 
checking local user and remote user requested domains, URLs and links against the 
friendly outbound list, unfriendly outbound list and outbound exception list and then with 
respect to both inbound and outbound requests for hard filtering unless overruled by the 
outbound exception list or domain inbound exception list either approving the request, 
terminating the request or terminating and re-routing the request without the knowledge 
of the user, and for soft filtering unless overruled by the outbound exception list or 
domain inbound exception list passing disapproved requests and sending an e-mail 
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alert to authorized recipients regarding the disapproved request, wherein, for requests 
that are terminated and re-rerou ted, inbound communications are arranged so that an 
actual location of a highly sensitive re source is located in an unpublished location that is 
a replacem ent location to which requests rejected bv the application setver are 
rerouted, wherein client s of approved users are listed in the application server in the 
unfriendly inbound list and are sent bv the application server to the replacement 
location, and wherein clients of unap proved users are not listed in the unfriendly 
Inbound list and have their request se nt to a published address that contains harmless 
information. 

(ii) a content fi l tering engin e capablo of performing content fi l tering 
i nc l uding chocking a cont e nt of 0 requ e sted docum e nt against a fri e nd l y content 
inbound Hot, an unfriond l y content inbound l ist, and a cont e nt oxception l ist tak o n from 
th e encrypted fil e s, tho friendly content inbound li s t, the unfriond l y content inbound Not, 
on l y ono of the friendly content inbound l ict and tho unfriend l y content i nbound lict boing 
a ctive at any g i von timo, and tho content oxcoption l ist being uniquoly configured by 
oaoh uoor, and thon for hard filtering ogainct tho unfriondly content Inbound Hot o'rthor 
pass i ng tho r e quootod dooumont if th e content of tho requested dooumont ic not on tho 
unfriondly cont e nt Inbound l ist or unlooo ovcrrulod by tho content oxception Hot rojocting 
the roguooted dooumont if tho content of tho roquootod dooumont i o on tho unfriondly 
content inbound li st and for hard f il tering againct tho friondly content inbound Hot oithor 
un l ooo ovcrrulod by th e content oxception l i ct pacoing tho roguooted documont tf tho 
cont e nt of th e requ e sted documont io on tho friond l y content inbound l ist or rojocting tho 
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requ es t e d dooumont if the content of tho requested documont ic not o n tho fr i ondly 
contont inbound Hot and for ooft filtering aga i n s t th e unfriondly content inbound l i ct o i thor 
approving tho content of tho roquoctod doGumont and passing tho roquoctod document 

the contont is not on the unfriondly content i nbound Hot or unlooo ovorrul e d by th e 
cont e nt exc e ption l iot rejecting tho content of th e requoctod dooumont and paoo i ng a 
remainder of tho roquoctod documont i f the content ic on tho unfriondly contont i nbound 
list and for - ooft fi l tering aga i nst tho fr i ondly content i nbound list e ith e r un l oos ov e rru le d 
b y- th e content e xcept i on l iot paooing tho request e d docum e nt i f th e content ic not on the 
friondly content inbound list or passing tho roquoctod dooumont and high li ghting - too 
content of tho roquooted dooumont if the content ic on tho fri e ndly contont inbound Hot, 
sai d cont e nt filtering aloo includ i ng 0 ma i l fi l t e ring that chocks a subjoct, a s e nd e r's 
addr e ss and 0 condor's domain a gainst an unfr i ond l y e mail l ist a fr i ond l y e - ma il H s t 

and an 0 mai l cxcoption l i ct, 

the application server acting internally to communicate with the domain filtering 
engine aa d w i th tho contont filtering englno and acting externally as a proxy server that 
receives requests from HTTP clients, forwards the requests to servers, receives a 
server response and forwards the server response to the HTTP clients. 

2. (original) The software of claim 1, wherein the domain filtering engine also has 
an optional e-mail alert system for hard filtering and for soft filtering. 

3. (currently amended) The software of claim 1 , whoroin tho content filtering 
e ng i n e has an inbound privacy 6 h ie ld for b l ock i ng ccript i ng languago functions for 
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particu l ar uoor occounto and whoro wherein the domain filtering engine has an 
outbound privacy shield for blocking disapproved character strings representing 
confidential information. 

4. (canceled) 

5. (canceled) 

6. (original) The software of claim 1, including an automated scheduler that 
controls a launching of the application server automatically and decides which user 
account to activate and when to shut off an access to a world wide web, and includes 
an automated list updater that updates the friendly inbound list, the unfriendly inbound 
list, the friendly outbound list and the unfriendly outbound lists for each user account 
from links on the web. 

7. (canceled) 

8. (canceled) 

9. (currently amended) The software of claim 1 , wherein the administrative 
module includes an editor, the editor including an editing pane, said editor also including 
an encryption function that generates one or more secret symmetric encryption keys, 
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the one or more encryption keys being uniquely associated with a text inputted by a 
user in the editing pane, said encryption function capable of encrypting at th e us e r's 
optieR all or only a portion of an e-mail message selected bv the user and all or only a 
p ortion of - an 0 ma il messago attaohmont filo and paid encryption function a l oo oapob l o 
of o norypt i ng a l l or a combinat i on of fi l oc on a hard drive local to tho ooftwaro . 

10. (original) The software of claim 1, wherein the application server, instead of 
acting externally as a proxy server, acts externally within a deployment of a chain of 
proxy servers, said chain of proxy servers including at least a first proxy server that 
receives requests from HTTP clients and forwards the requests through a zero or more 
intermediary proxy servers to a last proxy server, said last proxy server forwarding the 
requests to servers, and wherein the last proxy server receives a server response and 
forwards the server response through the zero or more intermediary proxy servers back 
to the first proxy server, which first proxy server forwards the server response to HTTP 
clients. 

11. (original) The software of claim 1, wherein the administrative module is also 
capable of configuring an automated configuration script file for accessing the global 
telecommunications network. 

1 2. (original) The software of claim 1 , wherein for e-mail filtering includes an 
option of hard e-mail filtering in which an incoming e-mail is deleted from a user e-mail 
inbox and includes an option for soft filtering in which an incoming e-mail remains in the 
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user e-mail inbox but is inaccessible to the user, 

13. (currently amended) A versatile customizable security and filtering software 
embedded u pon a computer-readable medium, the software comprising: 

(a) an administrative module that a user interacts with for creating user accounts 
and configuring those user accounts, and for configuring automated services, 

the administrative module for accepting user inputs for configuration settings for 
inbound communications and for outbound communications, and having list 
maintenance functions including list editing, list deleting, searching of lists, saving of 
lists, proxy chaining routing, adding and deleting users, interchanging lists and importing 
and exporting lists, 

said administrative module for configuring a range of access levels and being 
capable of creating three types of user accounts that have unique user names and 
passwords for each user account including an administrator account that is self- 
configuring and that controls automated services and selects for each account hard 
filtering or soft filtering, regular accounts with administrative privileges other than the 
privilege to create additional accounts, view information on any other accounts or 
configure automated services and regular accounts without administrative privileges 
and in addition a fourth type of user account namely one anonymous guest user 
account to be used in a manual launch of the software by general users who have no 
system-based user name or password, 

the admin istrative module for storing as encrypted files on hardware memory the 
configurations of the range of access levels for the user accounts created and the 
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configurations of the automated services 
(b) an application server including 

(i) a domain filtering engine capable of using from the encrypted files a 
friendly outbound list and an unfriendly outbound list only one of which is active at any 
given time and an outbound exception list, and using a friendly inbound list and an 
unfriendly inbound list only one of which is active at any given time, and a domain 
inbound exception list, the friendly outbound list, the unfriendly outbound list, the 
outbound exception list, the domain inbound exception list, a friendly e-mail list and an 
unfriendly e-mail list being uniquely configured for each user account, 

the domain filtering engine capable of registering the request in a logfile of 
all web sites requested by a user and capable of performing domain filtering, said 
domain filtering including domain inbound exception list maintained in the encrypted 
files and including for outbound requests checking local user and remote user 
requested domains, URLs and links against the friendly outbound list, unfriendly 
outbound list and outbound exception list and then with respect to outbound requests 
for hard filtering unless overruled by the outbound exception list or domain inbound 
exception list either approving the request, terminating the request or terminating and 
re-routing the request without the knowledge of the user, and for soft filtering unless 
overruled by the outbound exception list or domain inbound exception list passing 
disapproved requests and sending an e-mail alert to authorized recipients regarding the 
disapproved request, wherein, for requests that are terminated and re-rerouted, inbound 
communications are arranged so that an actual location of a highly sensitive resource is 
located in an unpublished location that is a replacement location to which requests 
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rejected bv the application server are rerouted, wherein clients of approved users are 
listed in the application server in the unfriendly inbound list and are sent bv the 
application server to the replacement location, and wherein clients of unapproved users 
are not liste d in the unfriendly inbound list and have their request sent to a published 
address that contains harmless information, and 

(ii) a content filtering engine capable of performing content filtering 
including checking a content of a requested document against a friendly content 
inbound list, an unfriendly content inbound list, and a content exception list taken from 
the encrypted files, the friendly content inbound list, the unfriendly content inbound list, 
only one of the friendly content inbound list and the unfriendly content inbound list being 
active at any given time, and the content exception list being uniquely configured by 
each user, and then for hard filtering against the unfriendly content inbound list either 
passing the requested document If the content of the requested document is not on the 
unfriendly content inbound list or unless overruled by the content exception list rejecting 
the requested document if the content of the requested document is on the unfriendly 
content inbound list and for hard filtering against the friendly content inbound list either 
unless overruled by the content exception list passing the requested document if the 
content of the requested document is on the friendly content inbound list or rejecting the 
requested document if the content of the requested document is not on the friendly 
content inbound list and for soft filtering against the unfriendly content inbound list either 
approving the content of the requested document and passing the requested document 
if the content is not on the unfriendly content inbound list or unless overruled by the 
content exception list rejecting the content of the requested document and passing a 
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remainder of the requested document if the content is on the unfriendly content inbound 
list and for soft filtering against the friendly content inbound list either unless overruled 
by the content exception list passing the requested document if the content is not on the 
friendly content inbound list or passing the requested document and highlighting the 
content of the requested document if the content is on the friendly content inbound list, 
said content filtering also including e-mail filtering that checks a subject, a sender's 
address and a sender's domain against an unfriendly e-mail list, a friendly e-mail list 
and an e-mail exception list, 

the application server acting internally to communicate with the domain filtering 
engine and with the content filtering engine and acting externally as a proxy server that 
receives requests from HTTP clients, forwards the requests to servers, receives a 
sewer response and forwards the server response to the HTTP clients. 

14. (currently amended) A versatile customizable security and filtering software 
embedded upon a computer-readable medium, the software , comprising: 

(a) an administrative module that a user interacts with for creating user accounts 
and configuring those user accounts, and for configuring automated services, 

the administrative module for accepting user inputs for configuration settings for 
inbound communications, and having list maintenance functions including list editing, 
list deleting, searching of lists, saving of lists, proxy chaining routing, adding and 
deleting users, interchanging lists and importing and exporting lists, 

said administrative module for configuring a range of access 
levels and being capable of creating three types of user accounts that have unique user 
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names and passwords for each user account including an administrator account that is 
self-configuring and that controls automated services and selects for each account hard 
filtering or soft filtering, regular accounts with administrative privileges other than the 
privilege to create additional accounts, view information on any other accounts or 
configure automated services and regular accounts without administrative privileges 
and in addition a fourth type of user account namely one anonymous guest user 
account to be used in a manual launch of the software by general users who have no 
system-based user name or password, 

the administrative module for storing as encrypted files on hardware memory the 
configurations of the range of access levels for the user accounts created and the 
configurations of the automated services 
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(b) an application server including a content filtering engine capable of 
performing content filtering including checking a content of a requested 
document against a friendly content inbound list, an unfriendly content inbound 
list, and a content exception list taken from the encrypted files, the friendly 
content inbound list, only one of the friendly content inbound list and the 
unfriendly content inbound list being active at any given time, the unfriendly 
content inbound list and the content exception list being uniquely configured by 
each user, and then for hard filtering against the unfriendly content inbound list 
either passing the requested document if the content of the requested document 
is not on the unfriendly content inbound list or unless overruled by the content 
exception list rejecting the requested document if the content of the requested 
document is on the unfriendly content inbound list and for hard filtering against 
the friendly content inbound list either unless overruled by the content exception 
list passing the requested document if the content of the requested document is 
on the friendly content inbound list or rejecting the requested document if the 
content of the requested document is not on the friendly content inbound list and 
for soft filtering against the unfriendly content inbound list either approving the 
content of the requested document and passing the requested document if the 
content is not on the unfriendly content inbound list or unless overruled by the 
content exception list rejecting the content of the requested document and 
passing a remainder of the requested document if the content is on the unfriendly 
content inbound list and for soft filtering against the friendly content inbound list 
either unless overruled by the content exception list passing the requested 
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document if the content is not on the friendly content inbound list or passing the 
requested document and highlighting the content of the requested document If 
the content is on the friendly content inbound list, said content filtering also 
including e-mail filtering that checks a subject, a sender's address and a sender's 
domain against an unfriendly e-mail list, a friendly e-mail list and an e-mail 
exception list, 

the application server acting internally to communicate with the domain 
filtering engine and with the content filtering engine and acting externally as a 
proxy server that receives requests from HTTP clients, forwards the requests to 
servers, receives a server response and forwards the server response to the 
HTTP clients. 

15. (currently amended) A versatile customizable content security 
software embedded upon a computer-readable memory, the software , 
comprising: 

an administrative module that a user interacts with for creating user 
accounts, for adding and deleting users and for storing as encrypted files on 
hardware memory the user accounts and wherein the administrative module 
includes an editor, the editor including an editing pane, said editor also including 
an encryption function that generates one or more secret symmetric encryption 
keys, the one or more encryption keys being uniquely associated with a text 
inputted by a user in the editing pane, said encryption function capable of 
encrypting at th e user' s option all or only a portion of an e-mail message selected 
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bv the user and/or and a ll or only a portion of an e mail message attachm e nt file 
s e l e ct e d by the us e r and sa i d e ncryption function also capable of encrypting a ll 
or a combin a tion of fil e s on a hard driv e loca l to th e softwar e. 

16. (new) The software of claim 15, wherein said encryption function is 
capable of encrypting all or only a portion of an e-mail message attachment file 
selected by the user and is also capable of encrypting all or some files on a hard 
drive local to the software. 

17. (new) The software of claim 14, wherein the content filtering engine 
has an inbound privacy shield for blocking scripting language functions for 
particular user accounts. 

18. (new) The software of claim 13, wherein the content filtering engine, 
when performing hard filtering, can also replace a requested document that has 
been rejected with a replacement document selected by a user of the 
administrator account. 
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